Progress Moveit Web Application Firewall — known CVE vulnerabilities

Every CVE whose affected-product data names Progress Moveit Web Application Firewall, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2026-8037 — CVSS 9.6 (critical) — actively exploited: OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute…
• CVE-2026-59686 — CVSS 8.4 (high): An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit…
• CVE-2026-59687 — CVSS 8.4 (high): An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit…
• CVE-2025-13444 — CVSS 8.4 (high): OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User…
• CVE-2026-59688 — CVSS 8.4 (high): An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit…
• CVE-2026-59690 — CVSS 8.0 (high): A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF…
• CVE-2026-59689 — CVSS 8.0 (high): An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and…